Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-qsoXODQj9K5eHnKqZKFA63dHTg.roa
File: -qsoXODQj9K5eHnKqZKFA63dHTg.roa (raw, json)
Hash identifier: VwxjSHW8TA4+Jhi5ITDMPGnliYhhljEXCkD8kT3rUN8=
Subject key identifier: FA:AB:28:5C:E0:D0:8F:D2:B9:78:79:CA:A9:92:85:03:AD:DD:1D:38
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-qsoXODQj9K5eHnKqZKFA63dHTg.roa
Signing time: Thu 15 Sep 2022 02:43:50 +0000
ROA not before: Thu 15 Sep 2022 02:43:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 210.244.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FAAB285CE0D08FD2B97879CAA9928503ADDD1D38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:47:b1:ec:29:a3:1f:75:bd:7c:1c:2a:c1:94:
8e:93:e7:43:80:d4:18:9c:4c:c2:05:11:85:ec:2d:
ee:af:7e:d5:21:36:df:1f:c6:d6:27:fb:ed:a6:ab:
cf:99:09:1d:6c:02:73:a1:5f:a4:9a:ae:03:12:fd:
f8:d0:7a:e1:f8:69:e3:01:d9:7f:7e:e0:c3:ea:64:
9c:64:37:b1:e0:fb:d5:65:f5:64:f9:af:95:09:99:
d7:10:7c:30:62:67:49:5a:6c:a2:ae:f5:c3:91:36:
8f:ac:24:45:ef:aa:0f:a1:ef:c5:30:5f:2c:ba:e2:
20:47:55:a2:da:da:c2:09:bb:c2:e8:1d:a9:00:42:
e5:ae:08:99:f8:2b:26:76:ad:2c:3f:72:c0:44:47:
29:64:a1:d1:1b:e5:eb:ba:f0:e0:bf:a3:eb:94:64:
0c:e6:e5:f4:72:45:c8:2c:e5:64:d7:af:c2:37:7a:
20:ac:05:1b:e6:e1:d9:18:b3:1d:f5:ef:bc:25:a3:
41:c4:c1:ab:ce:38:32:7b:fd:a6:80:85:1a:86:64:
9a:d6:b2:36:46:d5:5e:a2:e6:51:c9:87:e3:e1:1a:
04:8e:ec:78:03:34:3f:61:66:12:ce:ef:75:34:96:
58:b1:56:2d:45:15:c1:65:57:5c:9a:d4:86:fd:76:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AB:28:5C:E0:D0:8F:D2:B9:78:79:CA:A9:92:85:03:AD:DD:1D:38
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-qsoXODQj9K5eHnKqZKFA63dHTg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.244.97.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:ba:97:d6:7f:07:b7:63:13:98:7a:8a:e4:ba:fc:3a:71:24:
e4:a4:b2:03:28:60:7f:41:61:b8:1a:e6:6b:18:22:9b:92:11:
96:6d:d5:f3:9c:7e:81:e6:af:b4:69:6f:42:05:20:97:15:b0:
6f:5f:f8:63:e4:04:52:71:21:cd:d8:9f:b6:87:ce:34:39:7a:
10:c6:d5:fc:92:30:70:5a:70:e6:bb:21:5a:ca:37:c6:29:2d:
18:8b:15:39:ea:b3:b9:28:77:14:88:e7:84:95:13:fa:3a:88:
6a:29:db:ab:3c:04:74:99:29:0c:d9:20:e8:e4:6e:42:74:f5:
dd:29:c6:11:57:79:d8:b1:c1:b0:e2:00:e9:bd:c0:85:dd:b0:
3b:62:5d:e4:d3:dd:f0:9a:52:d1:05:4e:d5:0a:7a:eb:54:56:
d2:1f:b0:f9:7f:34:1b:06:0e:3f:ba:a0:fb:0b:73:78:e4:b3:
f6:dc:97:60:0b:d7:18:b4:5c:70:50:1a:a1:72:84:35:a2:82:
7b:ba:20:d6:c6:f4:bb:ac:0f:39:06:5a:75:e2:19:a4:20:ba:
49:c3:10:51:4b:d9:41:42:0c:78:33:bd:24:9a:b1:5a:ea:fe:
d6:af:ee:73:cd:c6:3e:77:90:24:50:a4:a6:17:0f:32:3b:8b:
98:c2:c5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:57 2023 by rpki-client on console-ams.rpki-client.org